Thử thêm cái coi lào
Feb 20

Authorized awstats access

A simple (almost secure) solution:

awstats edit service -> connection info:

Open stats page

************** Statistics.asp ****************
rem line 1:
   


rem find:
AddFormRowLight("View Details")
StatsDetails = oStats.GetStatsDetails(UserName, Password, CLng(rsStats("StatsInstalId")))
StatsDetails = Replace(StatsDetails, "[domainname]", DomainName)
StatsDetails = Replace(StatsDetails, "[domainid]", DomainID)

'inserted Conviator.com
Dim md5keyhex
md5keyhex = calcMD5("MYsecretKEY" & DomainName)
StatsDetails = Replace(StatsDetails, "[md5key]", md5keyhex)
'end insert

**************** awstats.pl ******************
#1)
use MD5;

use vars qw/ $KEY $value $name @CONpairs $CONpair $CHECKKEY $ENV /;
$KEY = "MYsecretKEY";
@CONpairs = split(/&/, $ENV{'QUERY_STRING'});
foreach $CONpair (@CONpairs) {
  ($name, $value) = split(/=/, $CONpair);
  $value =~ tr/+/ /;
  $value =~ s/%([a-fA-F0-9][a-fA-F0-9])/pack("C", hex($1))/eg;
  $CONFORM{$name} = $value;
}

$CHECKKEY = MD5->hexhash($KEY.$CONFORM{config});

# 2) find:
&html_head;

# inserted Conviator.com
if ($CHECKKEY eq $CONFORM{key}) {
} else {
  print "Unauthrized access attemted
";
}
# end insert

# Security check

******************** end